blob storage cannot access

Kok Mun Jian 21 Reputation points
2026-08-25T03:47:33.46+00:00

the storage account cannot access at portal azure, nothing change

Azure Blob Storage
Azure Blob Storage

An Azure service that stores unstructured data in the cloud as blobs.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-08-25T03:47:52.06+00:00

    For Azure portal access to Blob Storage, the most common causes are missing permissions or network restrictions.

    1. Check Azure RBAC permissions for Microsoft Entra ID access:
      • At minimum, assign Reader at the storage account scope or higher so the account and containers can be viewed in the portal.
      • Also assign a blob data role depending on the operation:
        • Storage Blob Data Reader for read access
        • Storage Blob Data Contributor for read/write/delete
        • Storage Blob Data Owner for full blob access
    2. If access in the portal uses the storage account key instead of Microsoft Entra ID, verify the role includes:
      • Microsoft.Storage/storageAccounts/listkeys/action Built-in roles that include this are Reader and Data Access, Storage Account Contributor, Contributor, and Owner.
    3. Check for network restrictions on the storage account:
      • Public network access disabled
      • Client IP not in allowed IP ranges
      • Access limited to selected virtual networks or subnets
      • If using a private endpoint, verify DNS is configured correctly
    4. If using a private endpoint and accessing through Microsoft Edge or Google Chrome, verify the browser policy LocalNetworkAccessAllowedForUrl allows https://portal.azure.com.
    5. In the Azure portal, run the built-in diagnostics:
      • Open the storage account
      • Expand Help
      • Select Connectivity check This helps identify whether the issue is permissions, network security, or another connectivity problem.
    6. Match the error text to the fix:
      • "You don't have access" or 403 while opening containers: assign Reader or equivalent control plane permissions.
      • "This request is not authorized to perform this operation using this permission" when listing or reading blobs: assign a blob data role such as Storage Blob Data Reader.
      • "Network request failed – cannot access storage endpoint": review firewall, virtual network, private endpoint, DNS, and CORS settings.

    If nothing changed, start with Connectivity check, then verify both Reader and a Storage Blob Data role are still assigned at the correct scope.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.